$20 mini PC (Dolby controller) with unknown firmware password

Notice: Page may contain affiliate links for which we may earn a small commission through services like Amazon Affiliates or Skimlinks.

Mark Linton

New Member
Sep 28, 2018
20
8
3
Ok I managed to score a deal on a complete setup with the camera, conference phone and base unit.

On powering it all up, the phone comes up with settings, and a default password of admin/1739 to get into the phone settings. It also shows settings for the base unit as well. Now to attempt other access.

Webserver seems to be pretty basic from a security vulnerability perspective. I would imagine that the credentials will be the same as the bios, so maybe there's another way to look for the credentials used with the web service.
 
Last edited:

autoturk

Active Member
Sep 1, 2022
236
201
43
I bought a few more of these and have found them more useful than I initially imagined. I've been using them as an opnsense box for a few places I volunteer at, and for Proxmox/VM boxes for friends who want a home network more involved than just an ISP gateway. Nice to be able to just grab one from the shelf and give them away without having to stress about costs.
 

ufear

New Member
May 1, 2022
22
17
3
Utrecht, Netherlands
FWIW; playing with the speakerphone to see if I can get it working standalone; found some credentials for something at least:

Authentication.Local.Admin : U2FsdGVkX190+lBv73dYgPdreXadFxsvnGEx/T03EQQ=

Salted__tPowXkyv/a1=7

Dvms.Server.RegistrationPIN : U2FsdGVkX1/cBn3BV6KqkLmaRoDFvZo0YA57RkvHT/8=
Salted__}WFŽ4`{FKO
 

Mark Linton

New Member
Sep 28, 2018
20
8
3
FWIW; playing with the speakerphone to see if I can get it working standalone; found some credentials for something at least:

Authentication.Local.Admin : U2FsdGVkX190+lBv73dYgPdreXadFxsvnGEx/T03EQQ=

Salted__tPowXkyv/a1=7

Dvms.Server.RegistrationPIN : U2FsdGVkX1/cBn3BV6KqkLmaRoDFvZo0YA57RkvHT/8=
Salted__}WFŽ4`{FKO
Can you share details and where and how you found that?
 
  • Like
Reactions: Samir

aeg

Member
May 6, 2019
27
35
13
That's "openssl enc" output, it looks like obfuscated creds stored in a config file. To get the actual creds, you also need the decryption key.
 
  • Like
Reactions: Samir